$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/247172e0-1034-3ff2-b368-4924cdd3ba24.roa File: 247172e0-1034-3ff2-b368-4924cdd3ba24.roa (raw, json) Hash identifier: wJrh43sWDno4+tAEb5S8AvC0dH2PDQjpbwE2K1WJr7E= Subject key identifier: DF:A2:EB:E8:17:7A:4E:2B:46:E8:54:56:D4:B0:6D:6B:BA:89:C8:BA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B153C2433BAD2D476C5E5F550 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/247172e0-1034-3ff2-b368-4924cdd3ba24.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 54113 IP address blocks: 140.248.238.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:24:33:ba:d2:d4:76:c5:e5:f5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=4e106974-7a2f-43f6-9334-2fc98b7a9e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:a9:2b:c9:0c:30:e1:df:e5:7d:10:06:c2: 29:67:dc:f7:b9:80:83:84:31:2f:e9:91:84:b9:7a: cd:8d:ea:7a:6b:bb:82:e2:38:9b:14:09:8c:a1:7b: 0e:1b:9f:8f:2d:21:ee:f2:9b:11:51:6b:87:ea:f1: 43:23:b9:af:97:a7:fa:bc:ad:a8:ac:b5:1e:5e:32: f2:3b:74:33:7e:de:be:ee:c5:87:a4:3e:22:cc:f9: 62:0e:54:cb:fb:af:16:95:b2:28:e5:70:29:4a:84: 21:ae:dc:b0:3e:11:49:f2:52:5d:be:b3:da:4f:bc: 0f:90:60:c1:01:82:29:c3:ee:b0:22:8f:22:3d:74: bb:52:5a:56:21:ab:6f:28:53:a8:7d:e6:e0:c2:8b: eb:13:d7:50:b6:4f:bb:8e:a5:81:67:b7:8a:29:66: 1a:bf:d5:65:d3:fc:5e:c6:cb:d9:4a:1d:2a:6c:3e: 3a:56:9a:a7:f5:b5:f3:88:90:d6:18:27:61:ce:fb: c8:64:08:0d:7a:1b:38:5a:5a:3e:a5:ec:eb:b1:3f: fb:65:89:67:1e:b6:cd:fd:0d:6f:98:39:a3:fc:cf: dc:14:22:49:19:fc:a4:69:83:5c:64:54:f5:49:a8: 7d:d1:90:3e:57:f3:10:e3:02:4c:f9:ab:7c:19:de: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:EB:E8:17:7A:4E:2B:46:E8:54:56:D4:B0:6D:6B:BA:89:C8:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/247172e0-1034-3ff2-b368-4924cdd3ba24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.238.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2d:94:1a:8d:7f:5f:64:04:8e:24:77:5e:62:0f:f6:27:a7: 5c:a6:54:4b:17:f3:a0:97:34:f0:86:81:35:2f:44:46:9a:e5: e6:13:9d:f0:22:50:0f:7c:21:14:7f:aa:6a:f5:31:47:9d:53: 34:9a:f2:58:8b:00:53:4c:22:0c:ed:8d:bf:4a:5e:34:96:a6: 22:67:75:cd:3a:5e:f7:41:9c:d7:3b:0a:70:bd:da:2b:7b:e4: fa:58:39:a8:98:37:f1:8c:ef:55:70:25:6c:82:91:66:30:a8: 60:ea:91:0c:7c:e3:40:c5:8f:64:bc:1c:98:be:79:aa:d8:f9: 50:9f:dc:96:0c:97:b1:9f:af:61:8f:c7:ec:60:fa:16:e4:77: 50:d5:2e:48:a3:64:a5:b6:f7:2a:34:7b:c2:e6:31:36:56:9a: c6:63:ef:d2:f9:be:e3:fb:67:dd:9c:4a:c2:1b:54:f1:60:62: 01:f1:00:25:21:8e:a6:ba:55:5e:be:4f:ce:de:6a:b0:f3:c8: 52:34:eb:e8:6b:87:42:e4:fa:f6:58:8e:d6:3c:4c:55:58:5e: 33:7d:78:55:40:66:ea:83:e9:3a:b2:e6:40:ee:ad:fa:3a:8d: 39:c3:d8:ef:4a:0c:a8:6a:25:e3:82:7e:09:12:be:3a:b0:66: 24:0f:08:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsVPCQzutLUdsXl9VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NGUxMDY5NzQtN2EyZi00M2Y2LTkzMzQtMmZjOThiN2E5ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYupK8kMMOHf5X0QBsIpZ9z3uYCDhDEv6ZGE uXrNjep6a7uC4jibFAmMoXsOG5+PLSHu8psRUWuH6vFDI7mvl6f6vK2orLUeXjLy O3Qzft6+7sWHpD4izPliDlTL+68WlbIo5XApSoQhrtywPhFJ8lJdvrPaT7wPkGDB AYIpw+6wIo8iPXS7UlpWIatvKFOofebgwovrE9dQtk+7jqWBZ7eKKWYav9Vl0/xe xsvZSh0qbD46Vpqn9bXziJDWGCdhzvvIZAgNehs4Wlo+pezrsT/7ZYlnHrbN/Q1v mDmj/M/cFCJJGfykaYNcZFT1Sah90ZA+V/MQ4wJM+at8Gd46uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN+i6+gXek4rRuhUVtSwbWu6ici6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjQ3MTcyZTAtMTAzNC0z ZmYyLWIzNjgtNDkyNGNkZDNiYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjugDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCrLZQajX9fZASOJHdeYg/2J6dcplRLF/OglzTwhoE1L0RGmuXmE53w IlAPfCEUf6pq9TFHnVM0mvJYiwBTTCIM7Y2/Sl40lqYiZ3XNOl73QZzXOwpwvdor e+T6WDmomDfxjO9VcCVsgpFmMKhg6pEMfONAxY9kvByYvnmq2PlQn9yWDJexn69h j8fsYPoW5HdQ1S5Io2SltvcqNHvC5jE2VprGY+/S+b7j+2fdnErCG1TxYGIB8QAl IY6mulVevk/O3mqw88hSNOvoa4dC5Pr2WI7WPExVWF4zfXhVQGbqg+k6suZA7q36 Oo05w9jvSgyoaiXjgn4JEr46sGYkDwjj -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:01 2025 by rpki-client